Network Security

ipsec access-list question

hello,i was configuring an access-list on a FWSM and came across an option which i think might help me reduce the number of access-list statements.access-list xxxxx extended permit ipsec a.a.a.a a.a.a.acould some one tell me if the ipsec option in th...

Any news about FWSM multicast support in multi context ?

Hi,It appears that multicast routing is not supported by the FWSM 4.1 when running in multiple context mode.Does anyone know if this support is on the roadmap ?Thanks

acs se management service log file

Dear allI want know Cisco Secure ACS Solution Engine how to Generate new file of the service log file. I can not find the configuration item. The acs se os is 4.2Thanks~

(Error code: ssl_error_rx_record_too_long) ??

An error occurred during a connection to xxxxxxxxxxx:3999.SSL received a record that exceeded the maximum permissible length.(Error code: ssl_error_rx_record_too_long)Today i received this message.Can you tell me what is the problem?Internet---------...

Resolved! Upgrade ASA Failover From 7.2 to 8.2

Hi All,Has anyone upgraded the ASA Failover pair From 7.2 to 8.2 ?Does it incurs any downtime during the operation or its transparent for all the connections passing through.I have read many documents which says that you can go from 7.2 to 8.2 direct...

Resolved! Cisco ASA for VPN only

Hello all,Hopefully a nice simple question for someone.I have a small network office with network range 192.168.1.0/24. It currently has a basic setup of router -> firewall -> switches, and I'd like to keep the netowkr as simple as possible.The route...

Resolved! Regular Expression Question for blocking and redirecting

I am currently using regular expression to block certain websites. I have two questions about this. My regular expressions are working fine, what I would like to know is if I can have more than value defined in each expression.Examplecurrently I ha...

Benefits of using Cisco Netflow than Syslogs in ASA Firewall

Hi,With the introduction of Netflow functionality in ASA firewall version 8.2, most of the network monitoring tools that use syslogs are catching up with netflow. I'm wondering on the benefit of using Cisco Netflow than Syslog in ASA firewalls with n...

Resolved! Pix501 nat config question

Hi Guys,Im new in the pix world,now i just bought a pix501 firewall.. great thing..however..I don't get a connection with nat to work...I have the next situation..outside address=192.168.1.254 /24 gateway address=192.168.1.1inside address-172.16.250....

site-to-site with ASA 5505

Attempting to setup site-to-site IPsec VPN with two ASA 5505s with 8.0(5):10.1.1.0/24 --> ASA 5505 (atl) --> Internet <-- ASA 5505 (bna) <-- 192.168.22.0/24"There are no isakmp sas" and "There are no ipsec sas"configs attached....Any ideas?

asdm on multiple context Unable to launch device manager

Hii have two systems with multiple context( admin, context1, context2)is it possible to use asdm in multiple context? I can reach asdm using the ip address of the admin context, but not with the ip addres of context1 or context2. nevertheless I can c...

NAC Temporary Role

Folks, I amconfiguring the NAC CAM 4.7.1 and I created two roles, Employ1 andEmploy2 but when that roles are into posture assessment with CCAA (Clean Access Agent) I saw that role Employ1 fall in Temporary role and Employ2 fall in Unauthenticated rol...

Resolved! ASA Configuration Assistance

Need to know what is the specific command on natting an ip to another ip via a port number. Here is an example of what I think it should be but can't find the correct verbege.This what I have listed which opens it up to any IP.access-list 101 extend...